基础信息
项目名称:dan-divy/spruce
项目徽章:
仓库地址:https://github.com/pterodactyl/panel
检测报告地址:https://www.murphysec.com/console/report/1721121364655472640/1722604279464300544
此报告由Murphysec提供
漏洞列表
漏洞名称 | 漏洞类型 | MPS编号 | CVE编号 | 漏洞等级 |
---|---|---|---|---|
socket.io 拒绝服务漏洞 | 拒绝服务 | MPS-15wb-xgoz | CVE-2023-32695 | 高危 |
npm bl 内存泄露漏洞 | 越界读取 | MPS-2020-12199 | CVE-2020-8244 | 中危 |
node-forge | 动态确定对象属性修改的控制不恰当 | MPS-2020-12281 | CVE-2020-7720 | 高危 |
npm node-fetch 不加限制的资源分配漏洞 | 不加限制或调节的资源分配 | MPS-2020-12719 | CVE-2020-15168 | 中危 |
json-bigint | 拒绝服务 | MPS-2020-13314 | CVE-2020-8237 | 高危 |
pathval | 原型污染 | MPS-2020-15246 | CVE-2020-7751 | 高危 |
Mquery 安全漏洞 | 拒绝服务 | MPS-2020-17265 | CVE-2020-35149 | 中危 |
Yargs Y18n 输入原型污染漏洞 | 动态确定对象属性修改的控制不恰当 | MPS-2020-17543 | CVE-2020-7774 | 严重 |
minimist 原型污染漏洞 | 原型污染 | MPS-2020-3516 | CVE-2020-7598 | 中危 |
npm package utils-extend 输入验证错误漏洞 | 原型污染 | MPS-2020-4966 | CVE-2020-8147 | 严重 |
Socketio Engineio 资源管理错误漏洞 | 拒绝服务 | MPS-2021-0191 | CVE-2020-36048 | 高危 |
Socketio Engineio 资源管理错误漏洞 | 拒绝服务 | MPS-2021-0192 | CVE-2020-36049 | 高危 |
Socketio Socket.io CORS漏洞 | 源验证错误 | MPS-2021-0652 | CVE-2020-28481 | 中危 |
mpath module 安全漏洞 | 使用不兼容类型访问资源(类型混淆) | MPS-2021-19477 | CVE-2021-23438 | 严重 |
MongoDB信息泄露漏洞 | 日志敏感信息泄露 | MPS-2021-24103 | CVE-2021-32050 | 高危 |
requests 代码注入漏洞 | 代码注入 | MPS-2021-2418 | CVE-2020-28502 | 高危 |
lodash 拒绝服务漏洞 | 拒绝服务 | MPS-2021-2574 | CVE-2020-28500 | 中危 |
lodash 命令注入漏洞 | 代码注入 | MPS-2021-2638 | CVE-2021-23337 | 高危 |
passport-oauth2 安全漏洞 | MPS-2021-32378 | CVE-2021-41580 | 中危 | |
prompts 正则表达式拒绝服务漏洞 | ReDoS | MPS-2021-32909 | 中危 | |
json-schema 安全漏洞 | 原型污染 | MPS-2021-34478 | CVE-2021-3918 | 严重 |
minimist 安全漏洞 | 原型污染 | MPS-2021-38405 | CVE-2021-44906 | 严重 |
Dan DeFelippi node-XMLHttpRequest 信任管理问题漏洞 | 证书验证不恰当 | MPS-2021-5338 | CVE-2021-31597 | 严重 |
ws 存在拒绝服务漏洞 | 拒绝服务 | MPS-2021-7109 | CVE-2021-32640 | 中危 |
Digital Bazaar Forge 存在输入验证错误漏洞 | 跨站重定向 | MPS-2022-0421 | CVE-2022-0122 | 中危 |
ejs | 代码注入 | MPS-2022-13642 | 中危 | |
flat 存在原型链污染 | 拒绝服务 | MPS-2022-13681 | 中危 | |
lodash | 拒绝服务 | MPS-2022-13841 | 高危 | |
mongoose 存在原型污染漏洞 | 原型污染 | MPS-2022-13891 | 中危 | |
mquery 存在原型污染漏洞 | 原型污染 | MPS-2022-13896 | 高危 | |
node-forge | 原型污染 | MPS-2022-13920 | 中危 | |
node-fetch 信息泄露漏洞 | 未授权敏感信息泄露 | MPS-2022-1461 | CVE-2022-0235 | 中危 |
Automattic Mongoose 安全漏洞 | 原型污染 | MPS-2022-3209 | CVE-2022-24304 | 高危 |
node-forge 密码签名验证不当漏洞 | 密码学签名的验证不恰当 | MPS-2022-3738 | CVE-2022-24771 | 高危 |
node-forge 密码签名验证不当漏洞 | 密码学签名的验证不恰当 | MPS-2022-3739 | CVE-2022-24772 | 高危 |
node-forge 密码签名验证不当漏洞 | 密码学签名的验证不恰当 | MPS-2022-3740 | CVE-2022-24773 | 中危 |
Express 中的 qs 模块存在原型污染漏洞 | 原型污染 | MPS-2022-3967 | CVE-2022-24999 | 高危 |
node-semver 安全漏洞 | ReDoS | MPS-2022-5166 | CVE-2022-25883 | 高危 |
passport 授权问题漏洞 | 会话固定 | MPS-2022-5178 | CVE-2022-25896 | 中危 |
Automattic Mongoose 安全漏洞 | 原型污染 | MPS-2022-52708 | CVE-2022-2564 | 严重 |
mocha ReDoS 漏洞 | ReDoS | MPS-2022-54598 | 高危 | |
Socketio Engine.IO拒绝服务漏洞 | 未捕获的异常 | MPS-2022-58577 | CVE-2022-41940 | 中危 |
minimatch 资源管理错误漏洞 | 拒绝服务 | MPS-2022-59845 | CVE-2022-3517 | 高危 |
flat 原型污染漏洞 | 原型污染 | MPS-2022-69541 | CVE-2020-36632 | 中危 |
Github ejs 安全漏洞 | 注入 | MPS-2022-8391 | CVE-2022-29078 | 严重 |
cross-fetch 安全漏洞 | 授权检查错误 | MPS-2022-8877 | CVE-2022-1365 | 中危 |
ejs 存在服务端模板注入漏洞 | 注入 | MPS-2023-10199 | CVE-2023-29827 | 严重 |
tough-cookie 安全漏洞 | 原型污染 | MPS-2023-5130 | CVE-2023-26136 | 严重 |
request SSRF防御绕过漏洞 | SSRF | MPS-2023-7722 | CVE-2023-28155 | 中危 |
get-func-name 安全漏洞 | ReDoS | MPS-cyhe-l36p | CVE-2023-43646 | 高危 |
tough-cookie | 原型污染 | MPS-esyq-56vx | 中危 | |
Automattic Mongoose 安全漏洞 | 原型污染 | MPS-rkw8-631m | CVE-2023-3696 | 严重 |
缺陷组件
组件名称 | 版本 | 最小修复版本 | 依赖关系 | 修复建议 |
---|---|---|---|---|
xmlhttprequest-ssl | 1.5.5 | 1.6.2 | 间接依赖 | 强烈建议修复 |
socket.io-parser | 3.4.1 | 3.4.3 | 间接依赖 | 建议修复 |
node-forge | 0.8.5 | 1.3.0 | 间接依赖 | 建议修复 |
y18n | 4.0.0 | 4.0.1 | 间接依赖 | 建议修复 |
mocha | 6.2.3 | 直接依赖 | 建议修复 | |
pathval | 1.1.0 | 1.1.1 | 间接依赖 | 建议修复 |
engine.io | 3.5.0 | 6.4.2 | 间接依赖 | 建议修复 |
express | 4.16.4 | 4.17.3 | 直接依赖 | 建议修复 |
utils-extend | 1.0.8 | 间接依赖 | 建议修复 | |
ejs | 2.7.4 | 直接依赖 | 建议修复 | |
lodash | 4.17.19 | 4.17.21 | 间接依赖 | 建议修复 |
mongoose | 5.12.13 | 5.13.20 | 直接依赖 | 建议修复 |
tough-cookie | 2.4.3 | 4.1.3 | 间接依赖 | 建议修复 |
qs | 6.5.2 | 6.5.3 | 间接依赖 | 建议修复 |
mquery | 3.2.2 | 3.2.5 | 间接依赖 | 建议修复 |
minimist | 0.0.8 | 1.2.6 | 间接依赖 | 建议修复 |
mpath | 0.7.0 | 0.8.4 | 间接依赖 | 建议修复 |
json-bigint | 0.3.1 | 1.0.0 | 间接依赖 | 建议修复 |
qs | 6.10.1 | 6.10.3 | 间接依赖 | 建议修复 |
json-schema | 0.2.3 | 0.4.0 | 间接依赖 | 建议修复 |
socket.io-parser | 3.3.0 | 3.3.2 | 间接依赖 | 建议修复 |
mongoose | 5.9.20 | 5.13.20 | 直接依赖 | 建议修复 |
minimist | 1.2.5 | 1.2.6 | 间接依赖 | 建议修复 |
mpath | 0.8.3 | 0.8.4 | 间接依赖 | 建议修复 |
node-forge | 0.8.2 | 1.3.0 | 间接依赖 | 建议修复 |
json-bigint | 0.3.0 | 1.0.0 | 间接依赖 | 建议修复 |
engine.io | 3.3.2 | 6.4.2 | 间接依赖 | 建议修复 |
minimatch | 3.0.4 | 3.0.5 | 间接依赖 | 建议修复 |
node-fetch | 2.6.1 | 2.6.7 | 间接依赖 | 可选修复 |
request | 2.88.0 | 直接依赖 | 可选修复 | |
mongodb | 3.6.8 | 3.6.10 | 间接依赖 | 可选修复 |
passport | 0.4.1 | 0.6.0 | 直接依赖 | 可选修复 |
bl | 2.2.0 | 2.2.1 | 间接依赖 | 可选修复 |
socket.io | 2.2.0 | 2.4.0 | 直接依赖 | 可选修复 |
semver | 5.5.1 | 7.5.2 | 间接依赖 | 可选修复 |
prompts | 2.3.2 | 2.4.2 | 直接依赖 | 可选修复 |
passport-oauth2 | 1.5.0 | 1.6.1 | 间接依赖 | 可选修复 |
ws | 6.1.4 | 6.2.2 | 间接依赖 | 可选修复 |
flat | 4.1.0 | 5.0.2 | 间接依赖 | 可选修复 |
passport | 0.4.0 | 0.6.0 | 直接依赖 | 可选修复 |
prompts | 2.4.1 | 2.4.2 | 直接依赖 | 可选修复 |
get-func-name | 2.0.0 | 2.0.1 | 间接依赖 | 可选修复 |
semver | 5.7.1 | 7.5.2 | 间接依赖 | 可选修复 |
flat | 4.1.1 | 5.0.2 | 间接依赖 | 可选修复 |
node-fetch | 2.3.0 | 2.6.7 | 间接依赖 | 可选修复 |
许可证风险
许可证类型 | 相关组件 | 许可证风险 |
---|---|---|
MIT | 320 | 低 |
Apache-2.0 | 26 | 低 |
ISC | 32 | 低 |
BSD-3-Clause | 9 | 低 |
Unlicense | 1 | 低 |
BSD-2-Clause | 3 | 低 |
BSD | 1 | 低 |
Apache-2 | 1 | 低 |
SBOM清单
组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
---|---|---|---|
string-width | 3.1.0 | 间接依赖 | npm |
mongoose-legacy-pluralize | 1.0.2 | 间接依赖 | npm |
mkdirp | 0.5.5 | 间接依赖 | npm |
callsite | 1.0.0 | 间接依赖 | npm |
string.prototype.trimend | 1.0.1 | 间接依赖 | npm |
formidable | 1.2.2 | 直接依赖 | npm |
bindings | 1.5.0 | 间接依赖 | npm |
nan | 2.14.2 | 间接依赖 | npm |
https-proxy-agent | 2.2.4 | 间接依赖 | npm |
depd | 1.1.2 | 间接依赖 | npm |
punycode | 2.1.1 | 间接依赖 | npm |
prompts | 2.4.1 | 直接依赖 | npm |
base64-js | 1.5.1 | 间接依赖 | npm |
on-finished | 2.3.0 | 间接依赖 | npm |
request | 2.88.0 | 直接依赖 | npm |
etag | 1.8.1 | 间接依赖 | npm |
fs.realpath | 1.0.0 | 直接依赖 | npm |
mkdirp | 0.5.1 | 间接依赖 | npm |
base64-arraybuffer | 0.1.5 | 间接依赖 | npm |
es-to-primitive | 1.2.1 | 间接依赖 | npm |
json-bigint | 0.3.1 | 间接依赖 | npm |
component-emitter | 1.3.0 | 间接依赖 | npm |
memory-pager | 1.5.0 | 间接依赖 | npm |
yargs-parser | 13.1.2 | 间接依赖 | npm |
camelcase | 5.3.1 | 间接依赖 | npm |
debug | 3.1.0 | 间接依赖 | npm |
media-typer | 0.3.0 | 间接依赖 | npm |
har-schema | 2.0.0 | 间接依赖 | npm |
passport-google-oauth | 2.0.0 | 直接依赖 | npm |
node-forge | 0.8.2 | 间接依赖 | npm |
wrap-ansi | 5.1.0 | 间接依赖 | npm |
inherits | 2.0.4 | 间接依赖 | npm |
saslprep | 1.0.3 | 直接依赖 | npm |
google-p12-pem | 1.0.4 | 间接依赖 | npm |
@types/bson | 4.0.3 | 间接依赖 | npm |
readable-stream | 2.3.7 | 间接依赖 | npm |
socket.io-parser | 3.4.1 | 间接依赖 | npm |
parseurl | 1.3.2 | 间接依赖 | npm |
is-fullwidth-code-point | 2.0.0 | 间接依赖 | npm |
node-environment-flags | 1.0.5 | 间接依赖 | npm |
ipaddr.js | 1.9.1 | 间接依赖 | npm |
caseless | 0.12.0 | 间接依赖 | npm |
mv | 2.1.1 | 直接依赖 | npm |
y18n | 4.0.3 | 间接依赖 | npm |
oauth | 0.9.15 | 间接依赖 | npm |
assert-plus | 1.0.0 | 间接依赖 | npm |
assertion-error | 1.1.0 | 间接依赖 | npm |
is-callable | 1.2.0 | 间接依赖 | npm |
is-date-object | 1.0.2 | 间接依赖 | npm |
range-parser | 1.2.1 | 间接依赖 | npm |
file-uri-to-path | 1.0.0 | 间接依赖 | npm |
es-abstract | 1.18.3 | 间接依赖 | npm |
side-channel | 1.0.4 | 间接依赖 | npm |
semver | 5.5.1 | 间接依赖 | npm |
xmlhttprequest-ssl | 1.5.5 | 间接依赖 | npm |
inherits | 2.0.3 | 间接依赖 | npm |
supports-color | 5.5.0 | 间接依赖 | npm |
nan | 2.14.1 | 间接依赖 | npm |
chai | 4.2.0 | 直接依赖 | npm |
kleur | 3.0.3 | 间接依赖 | npm |
which-module | 2.0.0 | 间接依赖 | npm |
typical | 2.6.1 | 间接依赖 | npm |
punycode | 1.4.1 | 间接依赖 | npm |
@types/node | 15.12.2 | 间接依赖 | npm |
time-ago | 0.2.1 | 直接依赖 | npm |
array-flatten | 1.1.1 | 间接依赖 | npm |
on-headers | 1.0.2 | 间接依赖 | npm |
ecc-jsbn | 0.1.2 | 间接依赖 | npm |
yallist | 3.1.1 | 间接依赖 | npm |
fast-json-stable-stringify | 2.0.0 | 直接依赖 | npm |
extsprintf | 1.4.0 | 间接依赖 | npm |
base64id | 1.0.0 | 间接依赖 | npm |
process-nextick-args | 2.0.0 | 直接依赖 | npm |
@types/mongodb | 3.6.17 | 间接依赖 | npm |
content-type | 1.0.4 | 间接依赖 | npm |
ecdsa-sig-formatter | 1.0.11 | 间接依赖 | npm |
object.assign | 4.1.2 | 间接依赖 | npm |
cookie | 0.4.0 | 间接依赖 | npm |
has-cors | 1.1.0 | 间接依赖 | npm |
cookie-parser | 1.4.5 | 直接依赖 | npm |
is-negative-zero | 2.0.1 | 间接依赖 | npm |
ajv | 6.12.6 | 间接依赖 | npm |
methods | 1.1.2 | 间接依赖 | npm |
fast-text-encoding | 1.0.3 | 间接依赖 | npm |
flat | 4.1.1 | 间接依赖 | npm |
mime-db | 1.48.0 | 间接依赖 | npm |
vary | 1.1.2 | 间接依赖 | npm |
check-error | 1.0.2 | 间接依赖 | npm |
jsprim | 1.4.1 | 间接依赖 | npm |
fast-deep-equal | 3.1.3 | 间接依赖 | npm |
jsbn | 0.1.1 | 间接依赖 | npm |
better-assert | 1.0.2 | 间接依赖 | npm |
concat-map | 0.0.1 | 间接依赖 | npm |
color-name | 1.1.3 | 间接依赖 | npm |
denque | 1.5.0 | 间接依赖 | npm |
is-regex | 1.1.0 | 间接依赖 | npm |
es6-promise | 4.2.5 | 间接依赖 | npm |
set-blocking | 2.0.0 | 间接依赖 | npm |
random-bytes | 1.0.0 | 间接依赖 | npm |
mongoose | 5.12.13 | 直接依赖 | npm |
uuid | 3.3.2 | 间接依赖 | npm |
qs | 6.5.2 | 间接依赖 | npm |
diff | 3.5.0 | 间接依赖 | npm |
unbox-primitive | 1.0.1 | 间接依赖 | npm |
inflight | 1.0.6 | 间接依赖 | npm |
ejs | 2.7.4 | 直接依赖 | npm |
passport-google-oauth1 | 1.0.0 | 间接依赖 | npm |
sprintf-js | 1.0.3 | 间接依赖 | npm |
es6-promisify | 5.0.0 | 直接依赖 | npm |
util-deprecate | 1.0.2 | 直接依赖 | npm |
ms | 2.1.1 | 间接依赖 | npm |
socket.io-client | 2.2.0 | 间接依赖 | npm |
p-locate | 3.0.0 | 间接依赖 | npm |
finalhandler | 1.1.1 | 间接依赖 | npm |
bignumber.js | 9.0.1 | 间接依赖 | npm |
escape-html | 1.0.3 | 间接依赖 | npm |
http-errors | 1.6.3 | 间接依赖 | npm |
abort-controller | 3.0.0 | 间接依赖 | npm |
lodash | 4.17.19 | 间接依赖 | npm |
node-forge | 0.8.5 | 间接依赖 | npm |
string.prototype.trimend | 1.0.4 | 间接依赖 | npm |
deep-eql | 3.0.1 | 间接依赖 | npm |
minimist | 1.2.5 | 间接依赖 | npm |
mquery | 3.2.5 | 间接依赖 | npm |
passport-oauth2 | 1.5.0 | 间接依赖 | npm |
decamelize | 1.2.0 | 间接依赖 | npm |
has-binary2 | 1.0.3 | 间接依赖 | npm |
unpipe | 1.0.0 | 间接依赖 | npm |
call-bind | 1.0.2 | 间接依赖 | npm |
mime | 2.5.2 | 间接依赖 | npm |
debug | 4.1.1 | 间接依赖 | npm |
asn1 | 0.2.4 | 间接依赖 | npm |
utils-extend | 1.0.8 | 间接依赖 | npm |
event-target-shim | 5.0.1 | 间接依赖 | npm |
socket.io-adapter | 1.1.2 | 间接依赖 | npm |
forever-agent | 0.6.1 | 间接依赖 | npm |
qs | 6.10.1 | 间接依赖 | npm |
object.assign | 4.1.0 | 间接依赖 | npm |
ansi-regex | 4.1.0 | 间接依赖 | npm |
opencollective-postinstall | 2.0.3 | 直接依赖 | npm |
fresh | 0.5.2 | 间接依赖 | npm |
has-symbols | 1.0.1 | 间接依赖 | npm |
is-buffer | 2.0.4 | 间接依赖 | npm |
getpass | 0.1.7 | 间接依赖 | npm |
sparse-bitfield | 3.0.3 | 间接依赖 | npm |
tweetnacl | 0.14.5 | 间接依赖 | npm |
depd | 2.0.0 | 间接依赖 | npm |
accepts | 1.3.5 | 间接依赖 | npm |
ansi-styles | 3.2.1 | 间接依赖 | npm |
is-regex | 1.1.3 | 间接依赖 | npm |
require-main-filename | 2.0.0 | 间接依赖 | npm |
flat | 4.1.0 | 间接依赖 | npm |
isstream | 0.1.2 | 间接依赖 | npm |
uuid | 3.4.0 | 间接依赖 | npm |
yallist | 3.0.3 | 间接依赖 | npm |
yargs-unparser | 1.6.0 | 间接依赖 | npm |
ncp | 2.0.0 | 间接依赖 | npm |
which-boxed-primitive | 1.0.2 | 间接依赖 | npm |
form-data | 2.3.3 | 间接依赖 | npm |
after | 0.8.2 | 间接依赖 | npm |
safer-buffer | 2.1.2 | 间接依赖 | npm |
performance-now | 2.1.0 | 间接依赖 | npm |
gtoken | 2.3.3 | 间接依赖 | npm |
mongoose | 5.9.20 | 直接依赖 | npm |
extend | 3.0.2 | 间接依赖 | npm |
negotiator | 0.6.1 | 间接依赖 | npm |
async-limiter | 1.0.0 | 间接依赖 | npm |
get-intrinsic | 1.1.1 | 间接依赖 | npm |
type-is | 1.6.16 | 间接依赖 | npm |
accepts | 1.3.7 | 间接依赖 | npm |
mkdirp | 0.5.4 | 间接依赖 | npm |
escape-string-regexp | 1.0.5 | 间接依赖 | npm |
browser-stdout | 1.3.1 | 间接依赖 | npm |
component-emitter | 1.2.1 | 间接依赖 | npm |
get-caller-file | 2.0.5 | 间接依赖 | npm |
object-component | 0.0.3 | 间接依赖 | npm |
har-validator | 5.1.3 | 间接依赖 | npm |
socket.io-parser | 3.3.2 | 间接依赖 | npm |
merge-descriptors | 1.0.1 | 间接依赖 | npm |
extsprintf | 1.3.0 | 间接依赖 | npm |
has | 1.0.3 | 间接依赖 | npm |
cookie | 0.4.1 | 间接依赖 | npm |
q | 1.5.1 | 间接依赖 | npm |
aws4 | 1.11.0 | 间接依赖 | npm |
mime-db | 1.33.0 | 间接依赖 | npm |
sift | 7.0.1 | 间接依赖 | npm |
resolve-from | 2.0.0 | 间接依赖 | npm |
gcp-metadata | 1.0.0 | 间接依赖 | npm |
safe-buffer | 5.2.1 | 间接依赖 | npm |
gaxios | 1.8.3 | 间接依赖 | npm |
minimatch | 3.0.4 | 间接依赖 | npm |
object-keys | 1.1.1 | 间接依赖 | npm |
newsapi | 2.4.1 | 直接依赖 | npm |
newsapi | 2.4.0 | 直接依赖 | npm |
bcrypt-pbkdf | 1.0.2 | 间接依赖 | npm |
node-fetch | 2.6.1 | 间接依赖 | npm |
ipaddr.js | 1.8.0 | 间接依赖 | npm |
send | 0.16.2 | 间接依赖 | npm |
uri-js | 4.2.2 | 直接依赖 | npm |
balanced-match | 1.0.0 | 间接依赖 | npm |
chalk | 2.4.2 | 间接依赖 | npm |
range-parser | 1.2.0 | 间接依赖 | npm |
debug | 2.6.9 | 直接依赖 | npm |
socket.io-adapter | 1.1.1 | 间接依赖 | npm |
aws-sign2 | 0.7.0 | 间接依赖 | npm |
verror | 1.10.0 | 间接依赖 | npm |
ms | 2.0.0 | 间接依赖 | npm |
passport-strategy | 1.0.0 | 间接依赖 | npm |
json-bigint | 0.3.0 | 间接依赖 | npm |
har-validator | 5.1.5 | 间接依赖 | npm |
array-tools | 1.8.6 | 直接依赖 | npm |
bluebird | 3.5.1 | 间接依赖 | npm |
sliced | 1.0.1 | 间接依赖 | npm |
bl | 2.2.0 | 间接依赖 | npm |
engine.io-parser | 2.2.1 | 间接依赖 | npm |
define-properties | 1.1.3 | 间接依赖 | npm |
optional-require | 1.0.3 | 间接依赖 | npm |
glob | 6.0.4 | 间接依赖 | npm |
bignumber.js | 7.2.1 | 间接依赖 | npm |
has-flag | 3.0.0 | 间接依赖 | npm |
engine.io-client | 3.5.2 | 间接依赖 | npm |
bson | 1.1.4 | 间接依赖 | npm |
psl | 1.1.31 | 间接依赖 | npm |
glob | 7.1.3 | 间接依赖 | npm |
mime-types | 2.1.31 | 间接依赖 | npm |
bson | 1.1.6 | 间接依赖 | npm |
isarray | 1.0.0 | 间接依赖 | npm |
setprototypeof | 1.1.0 | 间接依赖 | npm |
combined-stream | 1.0.7 | 间接依赖 | npm |
tough-cookie | 2.4.3 | 间接依赖 | npm |
delayed-stream | 1.0.0 | 间接依赖 | npm |
process-nextick-args | 2.0.1 | 间接依赖 | npm |
statuses | 1.4.0 | 间接依赖 | npm |
has-bigints | 1.0.1 | 间接依赖 | npm |
mquery | 3.2.2 | 间接依赖 | npm |
prompts | 2.3.2 | 直接依赖 | npm |
object-inspect | 1.10.3 | 间接依赖 | npm |
p-try | 2.2.0 | 间接依赖 | npm |
express-session | 1.17.1 | 直接依赖 | npm |
brace-expansion | 1.1.11 | 间接依赖 | npm |
he | 1.2.0 | 间接依赖 | npm |
pify | 4.0.1 | 间接依赖 | npm |
lodash | 4.17.21 | 直接依赖 | npm |
destroy | 1.0.4 | 间接依赖 | npm |
function-bind | 1.1.1 | 间接依赖 | npm |
growl | 1.10.5 | 间接依赖 | npm |
cliui | 5.0.0 | 间接依赖 | npm |
socket.io | 2.2.0 | 直接依赖 | npm |
debug | 3.2.7 | 间接依赖 | npm |
sisteransi | 1.0.5 | 间接依赖 | npm |
log-symbols | 2.2.0 | 间接依赖 | npm |
json-schema | 0.2.3 | 间接依赖 | npm |
object.getownpropertydescriptors | 2.1.0 | 间接依赖 | npm |
engine.io | 3.5.0 | 间接依赖 | npm |
jws | 3.2.2 | 间接依赖 | npm |
balanced-match | 1.0.2 | 间接依赖 | npm |
passport | 0.4.1 | 直接依赖 | npm |
component-bind | 1.0.0 | 间接依赖 | npm |
passport-google-oauth20 | 2.0.0 | 间接依赖 | npm |
js-yaml | 3.13.1 | 间接依赖 | npm |
indexof | 0.0.1 | 间接依赖 | npm |
parseurl | 1.3.3 | 间接依赖 | npm |
statuses | 1.5.0 | 间接依赖 | npm |
psl | 1.8.0 | 间接依赖 | npm |
cookie-signature | 1.0.6 | 间接依赖 | npm |
cookie | 0.3.1 | 间接依赖 | npm |
core-js | 3.14.0 | 间接依赖 | npm |
bytes | 3.0.0 | 间接依赖 | npm |
pause | 0.0.1 | 间接依赖 | npm |
content-disposition | 0.5.2 | 间接依赖 | npm |
mocha | 6.2.3 | 直接依赖 | npm |
safe-buffer | 5.1.2 | 间接依赖 | npm |
pathval | 1.1.0 | 间接依赖 | npm |
find-up | 3.0.0 | 间接依赖 | npm |
core-js | 2.6.5 | 间接依赖 | npm |
ws | 6.1.4 | 间接依赖 | npm |
googleapis-common | 0.7.2 | 间接依赖 | npm |
base64-arraybuffer | 0.1.4 | 间接依赖 | npm |
ansi-regex | 3.0.0 | 间接依赖 | npm |
string-width | 2.1.1 | 间接依赖 | npm |
uri-js | 4.4.1 | 间接依赖 | npm |
on-headers | 1.0.1 | 间接依赖 | npm |
type-is | 1.6.18 | 间接依赖 | npm |
supports-color | 6.0.0 | 间接依赖 | npm |
jwa | 1.4.1 | 间接依赖 | npm |
once | 1.4.0 | 间接依赖 | npm |
strip-json-comments | 2.0.1 | 间接依赖 | npm |
encodeurl | 1.0.2 | 间接依赖 | npm |
locate-path | 3.0.0 | 直接依赖 | npm |
string_decoder | 1.1.1 | 间接依赖 | npm |
require-directory | 2.1.1 | 间接依赖 | npm |
engine.io | 3.3.2 | 间接依赖 | npm |
passport-oauth1 | 1.1.0 | 间接依赖 | npm |
object-inspect | 1.8.0 | 间接依赖 | npm |
arraybuffer.slice | 0.0.7 | 间接依赖 | npm |
strip-ansi | 5.2.0 | 间接依赖 | npm |
json-schema-traverse | 0.4.1 | 直接依赖 | npm |
fast-json-stable-stringify | 2.1.0 | 间接依赖 | npm |
is-date-object | 1.0.4 | 间接依赖 | npm |
basic-auth | 2.0.1 | 间接依赖 | npm |
is-string | 1.0.6 | 间接依赖 | npm |
mongodb | 3.5.9 | 间接依赖 | npm |
serve-static | 1.13.2 | 间接依赖 | npm |
is-typedarray | 1.0.0 | 间接依赖 | npm |
wide-align | 1.1.3 | 间接依赖 | npm |
express | 4.16.4 | 直接依赖 | npm |
ansi-colors | 3.2.3 | 间接依赖 | npm |
isarray | 2.0.1 | 间接依赖 | npm |
google-auth-library | 3.1.2 | 间接依赖 | npm |
socket.io | 2.4.1 | 直接依赖 | npm |
combined-stream | 1.0.8 | 间接依赖 | npm |
argparse | 1.0.10 | 间接依赖 | npm |
googleapis | 39.2.0 | 直接依赖 | npm |
negotiator | 0.6.2 | 间接依赖 | npm |
which | 1.3.1 | 间接依赖 | npm |
regexp-clone | 1.0.0 | 间接依赖 | npm |
path-exists | 3.0.0 | 间接依赖 | npm |
ms | 2.1.3 | 间接依赖 | npm |
iconv-lite | 0.4.23 | 间接依赖 | npm |
semver | 5.7.1 | 间接依赖 | npm |
socket.io-client | 2.4.0 | 间接依赖 | npm |
http-signature | 1.2.0 | 间接依赖 | npm |
esprima | 4.0.1 | 间接依赖 | npm |
oauth-sign | 0.9.0 | 间接依赖 | npm |
path-is-absolute | 1.0.1 | 间接依赖 | npm |
passport | 0.4.0 | 直接依赖 | npm |
mpath | 0.8.3 | 间接依赖 | npm |
sshpk | 1.16.1 | 间接依赖 | npm |
json-stringify-safe | 5.0.1 | 间接依赖 | npm |
raw-body | 2.3.3 | 间接依赖 | npm |
forwarded | 0.1.2 | 间接依赖 | npm |
chai | 4.3.4 | 直接依赖 | npm |
mongodb | 3.6.8 | 间接依赖 | npm |
base64id | 2.0.0 | 间接依赖 | npm |
uid2 | 0.0.3 | 间接依赖 | npm |
cloudinary | 1.22.0 | 直接依赖 | npm |
object.getownpropertydescriptors | 2.1.2 | 间接依赖 | npm |
bl | 2.2.1 | 间接依赖 | npm |
get-func-name | 2.0.0 | 间接依赖 | npm |
mpath | 0.7.0 | 间接依赖 | npm |
url-template | 2.0.8 | 间接依赖 | npm |
fast-text-encoding | 1.0.0 | 间接依赖 | npm |
base64url | 3.0.1 | 间接依赖 | npm |
string.prototype.trimstart | 1.0.4 | 间接依赖 | npm |
base64-js | 1.3.0 | 间接依赖 | npm |
formidable | 1.2.1 | 直接依赖 | npm |
has-symbols | 1.0.2 | 间接依赖 | npm |
path-to-regexp | 0.1.7 | 间接依赖 | npm |
agent-base | 4.3.0 | 间接依赖 | npm |
require_optional | 1.0.1 | 间接依赖 | npm |
object-tools | 1.6.7 | 间接依赖 | npm |
proxy-addr | 2.0.7 | 间接依赖 | npm |
dashdash | 1.14.1 | 间接依赖 | npm |
gaxios | 1.8.4 | 间接依赖 | npm |
engine.io-client | 3.3.2 | 间接依赖 | npm |
fast-deep-equal | 2.0.1 | 直接依赖 | npm |
body-parser | 1.18.3 | 间接依赖 | npm |
yeast | 0.1.2 | 间接依赖 | npm |
uid-safe | 2.1.5 | 间接依赖 | npm |
tunnel-agent | 0.6.0 | 间接依赖 | npm |
strip-ansi | 4.0.0 | 间接依赖 | npm |
is-callable | 1.2.3 | 间接依赖 | npm |
@babel/polyfill | 7.4.0 | 间接依赖 | npm |
color-convert | 1.9.3 | 间接依赖 | npm |
file-system | 2.2.2 | 直接依赖 | npm |
socket.io-parser | 3.3.0 | 间接依赖 | npm |
isexe | 2.0.0 | 间接依赖 | npm |
blob | 0.0.5 | 间接依赖 | npm |
ms | 2.1.2 | 间接依赖 | npm |
wrappy | 1.0.2 | 间接依赖 | npm |
file-match | 1.0.2 | 间接依赖 | npm |
es-abstract | 1.17.6 | 间接依赖 | npm |
utils-merge | 1.0.1 | 间接依赖 | npm |
parseuri | 0.0.5 | 间接依赖 | npm |
parseqs | 0.0.6 | 间接依赖 | npm |
mime | 1.4.1 | 间接依赖 | npm |
express-session | 1.17.2 | 直接依赖 | npm |
pathval | 1.1.1 | 间接依赖 | npm |
proxy-addr | 2.0.4 | 间接依赖 | npm |
is-symbol | 1.0.4 | 间接依赖 | npm |
forwarded | 0.2.0 | 间接依赖 | npm |
parseqs | 0.0.5 | 间接依赖 | npm |
asynckit | 0.4.0 | 间接依赖 | npm |
string.prototype.trimstart | 1.0.1 | 间接依赖 | npm |
debug | 3.2.6 | 间接依赖 | npm |
xmlhttprequest-ssl | 1.6.3 | 间接依赖 | npm |
backo2 | 1.0.2 | 间接依赖 | npm |
sift | 13.5.2 | 间接依赖 | npm |
ws | 7.4.6 | 间接依赖 | npm |
node-fetch | 2.3.0 | 间接依赖 | npm |
kareem | 2.3.1 | 间接依赖 | npm |
rimraf | 2.4.5 | 间接依赖 | npm |
engine.io-parser | 2.1.3 | 间接依赖 | npm |
lru-cache | 5.1.1 | 间接依赖 | npm |
morgan | 1.9.1 | 直接依赖 | npm |
mime-types | 2.1.18 | 间接依赖 | npm |
type-detect | 4.0.8 | 间接依赖 | npm |
kareem | 2.3.2 | 间接依赖 | npm |
component-inherit | 0.0.3 | 间接依赖 | npm |
core-util-is | 1.0.2 | 间接依赖 | npm |
parseuri | 0.0.6 | 间接依赖 | npm |
buffer-equal-constant-time | 1.0.1 | 间接依赖 | npm |
y18n | 4.0.0 | 间接依赖 | npm |
bcrypt-nodejs | 0.0.3 | 直接依赖 | npm |
es6-promise | 4.2.8 | 间接依赖 | npm |
denque | 1.4.1 | 间接依赖 | npm |
emoji-regex | 7.0.3 | 直接依赖 | npm |
minimist | 0.0.8 | 间接依赖 | npm |
p-limit | 2.3.0 | 间接依赖 | npm |
is-symbol | 1.0.3 | 间接依赖 | npm |
to-array | 0.1.4 | 间接依赖 | npm |
ee-first | 1.1.1 | 间接依赖 | npm |
yargs | 13.3.2 | 间接依赖 | npm |
guid | 0.0.12 | 直接依赖 | npm |
is-buffer | 2.0.5 | 间接依赖 | npm |
usage | 0.7.1 | 直接依赖 | npm |
apikeygen | 1.1.0 | 直接依赖 | npm |
aws4 | 1.8.0 | 间接依赖 | npm |